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Detailed Action 

1. Claims 1-24 is pending; Claims 1,2,7,9,10,15,17,18 and 23 have been amended; No claims were 
added, nor cancelled. 

2. Applicant's arguments, filed on 6/05/2006, with respect to claims 1-24 have been considered, but 
are not persuasive. 

Claim Objections 

3. In view of amendment made to claim 2 to overcome objection, the examiner withdraws 
the pending objection as it relates to claim 2. 

4. In view of amendments made to claims 7,15 and 23 to overcome objection, the examiner 
withdraws the pending objection as it relates to claims 7, 15, and 23. 

Claim Rejections - 35 U.S.C 112 

5. In view of amendment made to claim 2 to overcome 35 U.S.C 1 12 rejection, the 
examiner withdraws the pending rejection as it relates to claim 2. 

6. In view of amendments made to claims 7,15 and 23 to overcome to overcome 35 U.S.C 
1 12 rejection, the examiner withdraws the pending rejection as it relates to claims 7, 15, and 23. 

Information Disclosure Statement 

7. In view of the information disclosure statement filed on 7/9/2003, not being considered 
due to informalities, the examiner respectfully considers the new submitted IDS form. The 
Information Disclosure has been placed in the application as being considered by the examiner. 
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Claim Rejections 35 U.S.C 102 

8. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that form the 
basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or in public 
use or on sale in this country, more than one year prior to the date of application for patent in the United 
States. 

9. Claims 1-24 are rejected under 35 U.S.C. 102(b) as being anticipated by Scheussler et al 
(US Patent No. 6,366,950/Date of Patent April 2, 2002). 

Claims IS. and 17: 

Regarding claims 1,9, and 17, Scheussler teaches an apparatus for protecting an item of 
private information in a database (Figure 3, all features, wherein the identification number, user, 
email, and authentication are all within the database, Scheussler), wherein the item of private 
information is used as a key (Figure 3, diagram 32A and diagram 32D, wherein an index is a 
sequence of key pointers pairs where each pointer points to a record in the database that contains 
the key value in a particular field, column 10, lines 13-22, wherein the index is sorted on the key 
values to allow rapid searching for a particular key value, Scheussler), for retrieving data from 
the database (column 10, lines 29-32, wherein retrieve the ID number from the processor and 
prepares a message to be sent to the server, wherein the server includes the identification 
database defined in Figure 2, Scheussler) comprising: 

a receiving mechanism configured to receive the item of private information (column 
6,lines 58-59, wherein the computer receives the email message, column 2, lines 35-37, wherein 
the client module that generates the message includes identification number, column 2, line 37, 
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wherein the client computer includes a client module generates a message and sends the message 
over the communications medium, and column 6, lines 58-59, wherein the computer receives a 
email message, Scheussler); 

Scheussler discloses all the limitations above, as well a hashing mechanism. However, 
Scheussler is silent with respect to a hashing mechanism (column 5, lines 44-46, Scheussler) 
configured to create a hash of the item of private information at a database ; and a storage 
mechanism configured to store the hash of the item of private information in the database 
(Figure 4, diagram 400 and 403 and paragraph [0046], wherein at least one hash table, diagram 
403 as a search index with pointers into the table or group of database records, and paragraph 
[0047], wherein a hash table may include an array of 8-byt pointers to individual database 
records, Balogh). On the other hand Balogh discloses a hashing configured to create a hash of 
the item of private information at a database (Figure 4, diagram 400 and paragraph [0046], 
wherein hash buckets may be created using singly linked list of hash chain pointers, Balogh); and 
a storage mechanism configured to store the hash of the item of private information in the 
database (Figure 4, diagram 400 and 403 and paragraph [0046], wherein at least one hash table, 
diagram 403 as a search index with pointers into the table or group of database records, and 
paragraph [0047], wherein a hash table may include an array of 8-byt pointers to individual 
database records, Balogh). It would have been obvious to one of the ordinary skill in the art at 
the time of applicant's invention to create and store hash in at a database, as disclosed by Balogh, 
within Scheussler system. A skilled artisan would have been motivated to do so for protecting 
user logs, by comparing the password inputed by user to a stored value in the database, wherien 

■ 

if they match a user is authenticated, and wherein if the password database was to be 
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compromised, it would be difficult for an intruder to recover oringal passwords as well as 
creating indexes to columns to provide direct and fast access to rows. 
Claims 2.10. and 18: 

Regarding claims 2,10, and 18, Scheussler teaches wherein creating the hash can include 
creating at least one of a Secure Hash Algorithm-1 and a Message-Digest Algorithm 5 

(MD5) hash the hashing mechanism is configured to use SHA-1 or MD5 hashing functions 
(column 10, lines 1-5, wherein the field 32B has a size of 128 bits, the ID number has a size of 
44 bits, wherein fixed length is interpreted to be message digest 5, column 11, lines 46-48, 
wherein authenticating procedure, column 5, lines 57-67, wherein packet addressing, 
handshaking is defined to be message digest for the reason that it authenticate packet data and 
column 11, lines 4-8, wherein the computer applies a hash function to the id number to convert it 
to a first hash id number, Scheussler 1 ). 

Claims 3,11, and 19: 

Regarding claims 3,1 1, and 19, Scheussler teaches wherein the hashing mechanism is 
internal to the database (see Figure 1, diagrams 2 & 4, column 5, lines 40-45, wherein each 
computer 2, 4 has appropriate application and communications software modules, wherein the 
software modules include, Internet access software, cable modem software, two-way 
communications software, point-to-point software, the hasher software , software to retrieve and 
process the ID number from the identification module 8, Scheussler) and is transparent to an 

1 The examiner interpret the MD5 to be wherein the field 32B has a size of 128 bits, the ID number has a size of 44 
bits, correspond to the MD5 claimed since MD5 is defined to be a message digest that is a widely-used 
* cryptographic has function with a 128-bit hash value, and as a internet standard MD5 has been employed in a wide 
variety of security applications, and it also commonly used to check the integrity of flies (column 12, lines 17-29, 
Scheussler). 
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application (column 6, lines 21-29, wherein transparent is interpret to be a computer operation 
that does not require user intervention, in which a user is unaware that it is taking place) which 
manipulates the private information (column 6, lines 43-48, wherein communications software 
automatically converts the email into an appropriate electronic format, Scheussler). 

Claims 4,12, and 20: 

Regarding claims 4,12, and 20, Scheussler teaches a query mechanism (column 9, lines 
2-3) configured to perform queries containing the private information (column 9, lines 7-13, 
wherein recursive query expressions, wherein recursive is defined to be a program or task that 
can repeat itself indefinitely, Scheussler), wherein the query mechanism is configured to: 

receive the item of private information (column 6,lines 58-59, wherein the computer 
receives the email message, column 2, lines 35-37, wherein the client module that generates the 
message includes identification number, column 2, line 37, wherein sending the message over 
the communications medium, and column 6, lines 58-59, wherein the computer receives a email 
message, Scheussler); 

create a hash (column 5, lines 44-46, Scheussler) of the item of private information 
(column 8, lines 43-44, Scheussler); and 

query the database using the hash of the item of private information (column 8, lines 66- 

* 

67, Scheussler). 
Claims 5,13, and 21 : 

Regarding claims 5, 13, and 21, Scheussler teaches wherein the item of private 
information can include one of: 
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a social security number; 
a driver's license number; 
a passport number; 

an email address (Figure 4, diagram 202 and column 6, lines 27-29, Scheussler 2 ); 

a person's name; and 

a person's mother's maiden name. 

Claims 6,14,and 22: 

Regarding claims 6,14, and 22 Scheussler teaches wherein the hashing mechanism can be 
further configured to combine multiple items of private information prior to creating the hash 
(column 7, lines 35-40, wherein the conferencing connections can include video conferences, 
voice, chat, and data connections, and wherein the contemplated that the various types of 
conferences connection can be combined so that data connection is parallel to a voice 
connection, Scheussler). 
Claims 7,15, and 23: 

Regarding claims 7,15, and 23 Scheussler discloses wherein hashing mechanism is further 
configured to check a column attribute in the database to determine that "privacy" is enabled 
and only upon being enabled, creating the hash (column 7, lines 1 -6, wherein for instance the 
user can create a contact list in which all authorized users are listed, and wherein if the received 
ID number does not match to the listed and wherein if the received ID number does not match to 
the ID number stored for an authorized user from the contact list, the email will be rejected 

2 The examiner notes that claims 5,13, arid 21 does not require full examination of all claim limitations since the 
claims simply states wherein the item private information can include one of the following. Therefore, only one 
limitation was made reference to. 
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which is equivalent to determine the privacy is enabled and column 14, lines 38-41, wherein the 
server performs the look-up in its database and returns an authenticated email address if the look- 
up email address matches to an entry correlated to the ID number in the database and Figure 3, 
diagram 32C and column 2, lines 45-48, wherein status information is interpreted to be 
determining if an item is available, Scheussler). 

Claims 8 J 6, and 24: 

* 

Regarding claims 8,16, and 24 Scheussler teaches wherein the database is a Lightweight 
Directory Access Protocol (LDAP) database (column 9, lines 45-51, wherein LDAP directory 
entries are arranged in a hierarchical structure that reflects political, geographic, organizational 
boundaries, while entries representing countries appear at the top of the tree while other entries 
in the tree represent states or national organizations, and below them there may be entries 
representing people, organizational units, printers, documents, wherein the database is 
lightweight is defined to be the tree representing the directory information tree, known as DIT, to 
be a distributed LDAP database that can be hosted by more than one server, Schuessler). 



Prior Art of Record 

(The prior art made of record and not relied upon is considered pertinent to applicant's disclosure) 

1 . Scheussler et al (US Patent No. 6,366,950) discloses a communications network includes 
several computers connected to a communications medium, wherein a client computer has a 
unique identification number that is embedded within a processor. 

2. Balogh (US Publication No. 2003/0084039) discloses a method and system for processing 
query messages over a network. 
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Examiner Response to Arguments 

10. Applicant's arguments filed on June 5. 2006, with respect to the rejected claims in view 
of the cited references have been considered but are moot in view of applicant's amended claims 
necessitate new ground(s) of rejection. 

Conclusion 

11. Applicant's amendment necessitated the new ground(s) of rejection presented in this 
Office action. Accordingly, THIS ACTION IS MADE FINAL. See MPEP § 706.07(a). 
Applicant is reminded of the extension of time policy as set forth in 37 CFR 1.136(a). 

12. A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within TWO 
MONTHS of the mailing date of this final action and the advisory action is not mailed until after 
the end of the THREE -MONTH shortened statutory period, then the shortened statutory period 
will expire on the date the advisory action is mailed, and any extension fee pursuant to 37 CFR 
1.136(a) will be calculated from the mailing date of the advisory action. In no event, however, 
will the statutory period for reply expire later than SIX MONTHS from the date of this final 
action. 

Point of Contact 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Helene R. Rose whose telephone number is (571) 272-0749. The 
examiner can normally be reached on 8:00am - 4:30pm M-F. 
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If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Don Wong can be reached on (571) 272-1834. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent 

Application Information Retrieval (PAIR) system. Status information for published applications 

may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 

applications is available through Private PAIR only. For more information about the PAIR 

system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 

system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 

Helene R Rose 
Technology Center 2100 



July 26, 2006 




